[Samba] Authentication error., The requested encryption type is not supported by the Kerberos domain controller.

[Rowland Penny]

On Fri, 13 Dec 2024 07:34:47 +0100
Georg Weickelt via samba <samba at lists.samba.org> wrote:

> Hello,
> 
> After updating to Windows 24H2, I get an error message when
> connecting to remotedesktop: "Authentication error.
> The requested encryption type is not supported by the Kerberos domain 
> controller."

24H2 no longer has RC4, it only has AES, so could the KDC still be
using only RC4 ?
 
> 
> The domain controllers run with Samba 4.21.2-Ubuntu
> What can be done in this situation?
> 
> Thanks,
> 
> Georg
> 
> 
> smb.conf:
> 
> # Global parameters
> [global]
>          netbios name = AD1
>          realm = AD.EXAMPLE.COM
>          server role = active directory domain controller
>          workgroup = AD
>          dns forwarder = 192.168.3.2
>          interfaces = 192.168.3.8

That caught my attention, the DCs ipaddress is 192.168.3.8 and it is
forwarding to 192.168.3.2, what is 192.168.3.2 ?

Rowland